Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IEcnL1K4L3rRJvy19iZ9IbeY2xg.roa
File: IEcnL1K4L3rRJvy19iZ9IbeY2xg.roa (raw, json)
Hash identifier: 1hUEbT1bcRYBysd6vziZqJ6Fp8utvgO3CSX2VL0Poe4=
Subject key identifier: 20:47:27:2F:52:B8:2F:7A:D1:26:FC:B5:F6:26:7D:21:B7:98:DB:18
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A910135313F13A0BFE92CC21A0BE6C37A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IEcnL1K4L3rRJvy19iZ9IbeY2xg.roa
Signing time: Thu 14 Sep 2023 00:04:50 +0000
ROA not before: Thu 14 Sep 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:9100:bf9d/128 maxlen: 128
2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:91:01:35:31:3f:13:a0:bf:e9:2c:c2:1a:0b:e6:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 14 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2047272f52b82f7ad126fcb5f6267d21b798db18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:28:1f:0b:ee:6b:80:3f:10:39:18:8c:0e:
00:c2:5a:d4:5a:39:36:1b:1c:ad:67:a4:d1:82:ce:
a3:a5:54:ea:20:5e:f0:5d:48:78:24:46:60:a9:3f:
8f:2c:66:5e:18:1c:1b:d7:9d:2e:f5:1c:03:82:72:
32:00:dc:0d:38:36:04:24:2a:56:9a:3c:20:80:d1:
bb:19:28:e5:23:ae:db:e6:a3:8d:7d:63:56:5e:41:
3e:fe:38:d3:20:a2:75:15:76:d4:18:7b:e1:2a:06:
d1:be:e9:ee:23:12:4a:b5:29:41:c8:26:cb:3e:a7:
2d:50:8f:c8:37:da:c6:74:62:1f:a2:78:4d:a7:d9:
e9:09:b8:86:be:e6:a2:8c:6f:3e:bf:9e:93:30:a5:
b6:41:f1:d5:0e:fa:d3:f9:4d:5f:2a:97:68:81:ce:
f9:cb:09:a7:61:8d:78:64:6e:b9:56:dc:0f:30:55:
99:77:46:47:0d:7f:08:ed:5f:26:0c:05:e6:a1:92:
fc:85:1e:97:4e:4f:f5:15:1e:6d:8e:10:b0:e7:a6:
44:62:71:3d:14:50:58:d7:16:94:e7:88:4b:49:e2:
04:ea:7c:b1:b1:b9:25:ce:a3:36:c4:9f:15:55:5a:
6f:9b:e7:d9:ef:32:fb:0a:be:fb:c3:91:46:24:28:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:27:2F:52:B8:2F:7A:D1:26:FC:B5:F6:26:7D:21:B7:98:DB:18
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/IEcnL1K4L3rRJvy19iZ9IbeY2xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:34:35:c6:d3:af:b9:13:2a:03:f3:83:54:16:d1:fe:be:41:
b9:d9:08:7e:29:31:8c:04:7b:6c:27:90:1f:fe:95:33:7e:a9:
41:cd:11:c7:56:e4:68:1a:76:16:39:fd:80:8e:ed:2b:8d:ef:
ba:e5:23:00:78:20:73:79:14:19:cc:17:3a:f1:e8:f3:85:b6:
c1:fa:23:b0:ee:91:31:34:35:ca:7c:60:89:ac:bc:a7:83:81:
b7:f4:03:2e:6d:e2:4f:21:c5:1e:f1:25:0f:65:08:9b:43:b4:
11:c1:e1:9d:f6:a1:87:77:a5:e2:35:37:f0:92:cd:0c:9f:26:
ac:8a:f7:9b:3c:2d:0b:f9:80:a4:72:d5:1a:58:27:4a:a6:f1:
5c:56:ce:94:8c:ea:23:c2:cb:2d:8a:2a:bb:9a:b4:3d:f4:9c:
c6:85:55:2f:0f:a1:bb:20:fa:f9:cd:95:fc:ee:8b:e6:0a:37:
cd:f3:66:7d:cc:c6:4b:b6:6b:3b:ac:2e:07:5a:1d:9e:fa:8d:
81:8d:f3:cb:dc:3c:9e:b9:2b:ae:fd:80:2f:16:fb:72:cf:eb:
09:2e:7f:3b:dd:5d:de:89:35:9d:87:bc:f6:48:27:9e:13:4c:
83:4b:b6:1f:37:05:ad:ff:b5:39:a2:64:f7:c3:2a:58:53:ce:
6a:99:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:07:29 2025 by rpki-client